Vulnerabilidades do Microsoft Windows Server 2025 (Server Core installation)

CVE-2026-73013 Alta · 8.8 CWE-122 08/09/2026

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73012 Alta · 8.8 CWE-122 08/09/2026

Windows Management Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-73011 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73010 Crítica · 9.8 CWE-416 08/09/2026

Microsoft Failover Cluster Remote Code Execution Vulnerability

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

CVE-2026-73009 Crítica · 9.8 CWE-416 08/09/2026

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-73008 Média · 5.5 CWE-359 08/09/2026

Windows Biometric Service Information Disclosure Vulnerability

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.

CVE-2026-73007 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73006 Alta · 8.8 CWE-121 08/09/2026

DirectWrite Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73005 Alta · 7.0 CWE-362 08/09/2026

Windows Authentication Methods Elevation of Privilege Vulnerability

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

CVE-2026-73004 Média · 5.5 CWE-306 08/09/2026

Windows Autopilot Tampering Vulnerability

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.

CVE-2026-73003 Alta · 7.0 CWE-416 08/09/2026

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-73002 Alta · 7.8 CWE-190 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73001 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73000 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72999 Média · 6.8 CWE-125 08/09/2026

Windows USB Hub Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-72997 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72996 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72995 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72994 Alta · 7.8 CWE-20 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72993 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72992 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72991 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72990 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-72989 Alta · 7.5 CWE-908 08/09/2026

Windows Failover Cluster Information Disclosure Vulnerability

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

CVE-2026-72988 Alta · 7.8 CWE-122 08/09/2026

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.